Barnes.

Bernhard Kreinz

Thinking, building, teaching.

Engineer since the acoustic coupler. Taught the web before it was the web. Built a social network before Facebook. Wrote a cyber threat taxonomy because none existed.

Personal opinions. Not related to any actual or former employer.

Essays & analysis

Essays

Paradigms, taxonomies and the failure modes of consensus in cybersecurity — written in English and German.

Who

About

Bernhard Kreinz — “Barnes”

Since the first publication, my focus has been on understanding and applying technologies in the context of the internet: infrastructure, engineering, software development and knowledge transfer.

Role
Independent researcher · engineer · coder · risk analyst · philosopher · mathematician
Active since
1984 — Commodore 64 & acoustic coupler
On the net
1994 — present
Studies
University of Zurich, 1990–1995 — analytical philosophy (philosophy of science & logic), mathematics, theoretical physics
Focus
Philosophy of science & logic, mathematics, theoretical physics — applied to cyber risk, threat taxonomy and information

The tools change. The mission doesn’t: knowledge is good — being able to apply it is better.

  1. 1984Commodore 64 & acoustic coupler — first contact
  2. 1990University of Zurich — analytical philosophy, mathematics, theoretical physics
  3. 1994Static IP experiments — a private internet presence begins
  4. 1997barnes.ch goes online
  5. 1998Teaching the SIZ webmaster courses, until 2000
  6. 2005OKorNOK.com — a social network before the platforms
  7. 2022Focus on cyber risk management
  8. 2024tlctc.net — the threat taxonomy gets its own home
“The transfer of allegiance from paradigm to paradigm is a conversion experience that cannot be forced.” — Thomas Kuhn (attributed)

Built to last

Projects

A threat taxonomy, a social network before the platform era, and the course material that taught the web’s protocols.

The TLCTC logo: ten threat clusters arranged around a decagon.

Framework · author · since 2024

TLCTC

The 10 Top Level Cyber Threat Clusters: every cyber attack classified by its initial cause, the generic vulnerability being exploited, not by its effects. Ten mutually exclusive clusters, derived from axioms by logical deduction.

It started here as White Paper v1.4. It landed at tlctc.net, where the framework is published and maintained today.

The OKorNOK start page: OK oder NOK?

Conceived 1994 · launched 2005 · still running

OKorNOK

One of the first social-network prototypes, conceived in 1994 — human connectivity before the platform era. “Who’s coming? Who’s not? Yes, I was here before Facebook, but without the entrepreneurship.”

Today the platform keeps the whole technology stack in active duty: applied knowledge over theory.

The webmaster era: a page from the course days.

Teaching · SIZ webmaster courses · 1998–2000

Teaching

The original course documents that taught the protocols behind the web — written for the SIZ webmaster courses and still readable today.

Reference: the RFC Editor

Sound

Cyber Standards Blues

Engineering humour set to music: blues, rock, rap and pop about standards chaos — plus podcasts and talks on threat clusters and attack velocity.

Ready

Select a track
0:00 / 0:00

Films

Short films

Animations and music videos about standards, threat clusters and how to think a problem through.

Select a film

Pictures

Visual records

Rants, AI art, merchandise and diagrams — the pictures that went along with the arguments.